last executing test programs: 6.436219291s ago: executing program 1 (id=2): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ftruncate(r1, 0x1000) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCATTACH(r2, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000280)='./file0\x00', 0x10000, 0x8, 0xa3d, 0x0, 0x0, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x1000004, 0x0, 0x8, 0x8, 0xfffffffe, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000000, 0x2, 0xffffffff, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x653, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1]}) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x2) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) extattr_list_file(&(0x7f0000000100)='./file0\x00', 0x6, &(0x7f0000000140)=""/250, 0xfa) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r5, 0x6, 0x2000, 0x0, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1019, &(0x7f00000002c0)=0x5, 0x4) sendto(r5, 0x0, 0x0, 0x20100, 0x0, 0x0) procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000dc0)={0x20, 0x1, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r4, 0x0) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) __semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000000)) fchflags(r3, 0x40008) sync() sync() r6 = openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$MDIOCRESIZE(r6, 0xc1c06d04, 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x0, 0x0}) 6.353287473s ago: executing program 0 (id=1): socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000003c0)=[{0xffffffffffffffff, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x4, 0x7, 0x3fffffffffffff]}, {0x7fff, 0xfffffffffffffffa, 0x0, 0x2, 0x3, 0xfffffffffffffffc, [0xfb7, 0x4, 0x10, 0xdba2]}, {0x4f, 0xfffffffffffffffa, 0x4020, 0x4, 0x1, 0x7fffffffffffffff, [0x3ff, 0x7, 0x1]}, {0x0, 0xfffffffffffffffb, 0x2, 0x10, 0x1, 0x8000000000000001, [0x0, 0x2, 0x822, 0x1]}], 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x4b, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, 0x0, 0x100000, 0x0) syz_emit_ethernet(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) fork() pwritev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) r3 = fork() sigqueue(r3, 0xf, @sival_int=0x8000) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) freebsd11_lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000001e40)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) chflagsat(0xffffffffffffffff, 0x0, 0x200100, 0x400) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @broadcast}, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x81}, 0x0) openat$efidev(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$BIOCFEEDBACK(0xffffffffffffffff, 0x8004427c, 0x0) 5.993029715s ago: executing program 2 (id=3): r0 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r0, 0x3862) r1 = openat$filemon(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ftruncate(r1, 0x1000) r2 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCATTACH(r2, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000280)='./file0\x00', 0x10000, 0x8, 0xa3d, 0x0, 0x0, 0x2, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x9, 0x0, 0x0, 0x1000004, 0x0, 0x8, 0x8, 0xfffffffe, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4000000, 0x2, 0xffffffff, 0x2, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x653, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x1]}) truncate(&(0x7f0000000040)='./file0\x00', 0xaa480) open(&(0x7f0000000000)='./file0\x00', 0x200, 0x2) r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) extattr_list_file(&(0x7f0000000100)='./file0\x00', 0x6, &(0x7f0000000140)=""/250, 0xfa) r4 = open(&(0x7f0000000480)='./file0\x00', 0x80400000000206, 0x0) mlockall(0x2) r5 = socket(0x1c, 0x1, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(r5, 0x6, 0x2000, 0x0, 0x0) setsockopt$sock_int(r4, 0xffff, 0x1019, &(0x7f00000002c0)=0x5, 0x4) sendto(r5, 0x0, 0x0, 0x20100, 0x0, 0x0) procctl$PROC_REAP_ACQUIRE(0x0, 0x0, 0x2, 0x0) procctl$PROC_REAP_KILL(0x0, 0x0, 0x6, &(0x7f0000000dc0)={0x20, 0x1, 0x0, 0x0, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x20011, r4, 0x0) r6 = shmget$private(0x0, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) munmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000) __semctl$SETALL(0x0, 0x0, 0x9, &(0x7f0000000000)) shmat(r6, &(0x7f0000ffc000/0x3000)=nil, 0x2000) sync() sync() r7 = openat$md(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$MDIOCRESIZE(r7, 0xc1c06d04, 0x0) sysarch$I386_SET_LDT(0x1, &(0x7f0000000040)={0x0, 0x0}) 5.455030693s ago: executing program 1 (id=5): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x800, 0x100) r1 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r1, 0xc, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x100000001}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000040)={0x29, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffd, [0x0, 0x0, 0x6]}) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000000)={0x0, 0x18, 0x0, 0x0, 0x20, &(0x7f00000003c0)="70638953df0cef7e00080000000bf98994164394b5d947fa8802ca13b7270000", 0x10000, 0xbdfffffd, [0x0, 0x3]}) shm_open2(&(0x7f0000000340)='./file0\x00', 0x800, 0x20, 0x4, &(0x7f0000000380)='/dev/crypto\x00') r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) close(r3) socket$inet6(0x1c, 0x4, 0xc) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) r4 = kqueue() openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x6908bd7c4cbb1798) fchmod(r5, 0x188) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000300)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x1}, {0x60, 0x3, 0xfe, 0x5}, {0x6, 0x0, 0x4, 0xfffffffe}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) kevent(r4, &(0x7f00000000c0)=[{0x4, 0xffffffffffffffff, 0xb1}], 0x1, 0x0, 0x0, 0x0) rfork(0x3060) r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) ioctl$MDIOCATTACH(r7, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x653, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x1]}) 5.16218124s ago: executing program 3 (id=4): mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x100, &(0x7f0000000100)) r0 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) freebsd11_getdents(r0, &(0x7f0000000180)=""/53, 0x20) 5.102050242s ago: executing program 0 (id=6): socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x0, 0x989680}, 0x0) r0 = kqueue() kevent(r0, &(0x7f00000003c0)=[{0xffffffffffffffff, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x4, 0x7, 0x3fffffffffffff]}, {0x7fff, 0xfffffffffffffffa, 0x0, 0x2, 0x3, 0xfffffffffffffffc, [0xfb7, 0x4, 0x10, 0xdba2]}, {0x4f, 0xfffffffffffffffa, 0x4020, 0x4, 0x1, 0x7fffffffffffffff, [0x3ff, 0x7, 0x1]}, {0x0, 0xfffffffffffffffb, 0x2, 0x10, 0x1, 0x8000000000000001, [0x0, 0x2, 0x822, 0x1]}], 0x4, 0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)=0x7, 0x4) connect$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x34, 0x2, 0x2, @rand_addr=0xfffffffe}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x4b, 0x0, 0x0) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) openat$crypto(0xffffffffffffff9c, 0x0, 0x100000, 0x0) syz_emit_ethernet(0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)={0x0, 0x0, 0x0}, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x80000000000209, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x10000, 0x0) fork() r3 = open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) fork() mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) freebsd11_lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000001e40)) munmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000) chflagsat(0xffffffffffffffff, 0x0, 0x200100, 0x400) preadv(r2, &(0x7f0000001780)=[{&(0x7f0000000180)=""/184, 0x1b133353141e377d}], 0x10000000000000d1, 0x0) sendmsg$inet6_sctp(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000280)=@in={0x10, 0x2, 0x1, @broadcast}, 0x10, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x81}, 0x0) openat$efidev(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$BIOCFEEDBACK(0xffffffffffffffff, 0x8004427c, 0x0) 4.986663254s ago: executing program 3 (id=7): r0 = socket$inet6_sctp(0x1c, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x3f, &(0x7f0000000680)=0xffffffff, 0x4) ktimer_create(0x4, 0x0, &(0x7f0000000100)=0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x32, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) freebsd11_fstatat(r0, &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0), 0x4000) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) mount(&(0x7f0000000100)='cd9660\x00', &(0x7f0000000000)='./file0\x00', 0x100000, &(0x7f00000001c0)) accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0x1c, 0x1c, 0xffffffffffffffff, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) ktimer_create(0x4, 0x0, 0x0) r2 = kqueue() kevent(r2, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) aio_suspend(&(0x7f0000001680)=[{0xffffffffffffffff, 0x8, 0x0, 0x0, [0x8, 0xfffffffe], 0x8000, 0x5, 0x0, {0xc69, 0x9, 0x0}, {0x4, 0x5, @sival_ptr=0x7, @thr={0x0, 0x0}}}], 0x1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000680)={@local, @remote, [], {@ipv6={0x86dd, {0x0, 0x6, "004ce5", 0x28, 0x3a, 0x0, @local={0xfe, 0x80, '\x00', 0x0}, @mcast2, {[], @icmpv6=@ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr="ddbcd6d351ce5ce9db90fcbbe8adb0df", @loopback={0x1000000, 0x89}}}}}}}) fork() openat$ptmx(0xffffffffffffff9c, 0x0, 0x800, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) kevent(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ktimer_settime(r1, 0x0, &(0x7f0000000280)={{0x5, 0xa}, {0x0, 0x2000007d5}}, 0x0) ktimer_settime(r1, 0x0, &(0x7f0000000000)={{0xf32, 0xd1}, {0xa, 0x4}}, &(0x7f0000000040)) 2.706407182s ago: executing program 2 (id=8): openat$filemon(0xffffffffffffff9c, &(0x7f0000001400), 0x8, 0x0) r0 = kqueue() kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x0, [0x0, 0x0, 0x7, 0x40000000000000]}], 0x1, 0x0, 0x0, 0x0) r1 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x2000) shmdt(r1) r2 = openat$md(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount(&(0x7f0000000080)='cd9660\x00', &(0x7f00000000c0)='.\x00', 0x100, &(0x7f0000000100)) r3 = open$dir(&(0x7f0000000080)='.\x00', 0x0, 0x0) freebsd11_getdents(r3, &(0x7f0000000180)=""/53, 0x20) ioctl$MDIOCATTACH(r2, 0xc1c06d00, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0x1c, 0x3, 0x3a) sendto$inet6(r4, &(0x7f0000002700)="6a3364f80c04449d", 0x2400, 0x0, &(0x7f0000001280)={0x1c, 0x1c, 0x0, 0x0, @mcast2, 0x3}, 0x1c) kmq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x4, 0x0, @sigval_ptr}) connect$inet(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x2, 0x0, @remote={0xac, 0x14, 0x0}}, 0x10) cap_rights_limit(0xffffffffffffffff, 0xffffffffffffffff) r5 = kqueue() freebsd11_kevent(r5, &(0x7f0000001a40)=[{0x0, 0xfffffffffffffff8, 0x81, 0x20, 0xded1, 0x7f}], 0x1, &(0x7f0000001ac0)=[{}], 0x1, 0x0) r6 = open(&(0x7f0000000480)='./file0\x00', 0x80000000000206, 0x0) ftruncate(r6, 0x2) r7 = socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) dup2(r8, r7) r10 = open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) readv(r9, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/116, 0x74}], 0x1) sendfile(r10, r7, 0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=[{&(0x7f0000000500)="ac68", 0x2}], 0x1, 0x0}, 0x0, 0x7) bind$inet6(0xffffffffffffff9c, &(0x7f0000000280)={0x1c, 0x1c, 0x2, 0x6, @local={0xfe, 0x80, '\x00', 0x0}, 0x4}, 0x1c) r11 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$MDIOCATTACH(r11, 0xc1c06d00, &(0x7f0000000780)={0x0, 0x2, 0x3, 0x0, 0x10001, 0x8, 0x7, 0x0, 0xffffffff, 0x0, 0x0, [0x2, 0xfffffffd, 0x0, 0x4, 0x1ff, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x3, 0x100000, 0x7, 0xf22, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x0, 0xffffffff, 0x0, 0x2, 0x14, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffe, 0x0, 0x6, 0x9]}) 2.233674771s ago: executing program 1 (id=9): r0 = socket(0x11, 0x3, 0x0) setsockopt$inet_tcp_TCP_FUNCTION_BLK(0xffffffffffffffff, 0x6, 0x2000, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x10, 0x2, 0x2, @multicast1}, 0x10) r1 = socket$inet6_udp(0x1c, 0x2, 0x0) getsockopt$sock_int(r1, 0xffff, 0x1016, 0x0, &(0x7f0000000100)) ioctl$DIOCSETIFFLAG(0xffffffffffffffff, 0xc0284459, &(0x7f0000000180)={0x10, &(0x7f0000000200)="76eb751a2268ddc2c23add351989295ce9a21fed60e609b2710f985b0708037ba3c68de722aa5075888ce88e0130db2137e754f3a73831b707697338cf21dc3c4a07f1bcff39e35535f1eba2ffe685e82a", 0x0, 0x9, 0x7fffffff}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setrlimit(0x7, &(0x7f0000000040)={0x1}) setreuid(0xee00, 0x0) fork() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3, 0x410, 0xffffffffffffffff, 0x0) sendto$inet(r0, &(0x7f0000000580), 0x0, 0x8, 0x0, 0x0) kqueue() r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x47, &(0x7f00000000c0)={@multicast1, @rand_addr=0x32855626, @remote={0xac, 0x14, 0x0}}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r3, 0x6, 0x24, &(0x7f0000000240)="c8dd19bd123c547cc2f581e8223cb3f03ae13e04a6c025a5", 0x18) socket(0x26, 0x2, 0x0) r4 = socket(0x26, 0x2, 0x0) bind(r4, &(0x7f0000000040)=@in6={0x22, 0x1c, 0x3, 0x0, @mcast1}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa080600010800064400000000000000007f000001ffffffffffffac1400aa"]) recvmsg(r0, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.913503084s ago: executing program 3 (id=10): r0 = kqueue() r1 = socket$inet6_udp(0x1c, 0x2, 0x0) r2 = getppid() fcntl$setown(r1, 0x6, r2) fcntl$setown(r1, 0x6, 0xffffffffffffffff) kevent(r0, &(0x7f0000000040)=[{0x0, 0xfffffffffffffff9, 0x9, 0x8, 0xe8c5, 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = socket(0x1c, 0x1, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaa532dbe3b66315a2b00000000000800450000340000000000019078ac1400bbe00000044673000a006708000632000900000000e000000188020000f39f3f86fbbe243906000000d62619012d66925edb00d1b6d78710e01d601e11ec0b631930cbbeb66fed2974c6cee404035d4386c401f17f2ba1d73e854b31ecfac954c4e73d6761ebfcf6"]) setsockopt$sock_int(r3, 0xffff, 0x1001, &(0x7f00000000c0)=0x101, 0x4) kqueue() bind$inet6(r3, &(0x7f0000000140)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setresuid(0xffffffffffffffff, 0xee01, 0x0) r4 = socket$inet6_udp(0x1c, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x32, 0x0, 0x0) syz_emit_ethernet(0xa9, &(0x7f0000000700)={@local, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "0200", 0x73, 0x3a, 0xff, @rand_addr="78042000000014000001000000086500", @local={0xfe, 0x80, '\x00', 0x0}, {[], @icmpv6=@ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @empty, [{0x19, 0xb, "00000000000046f18a0e27c76e9e2ebfc436641c84925db92ea7084fc4d9bb929b454f3dfff2f5db599d37c1c53ed6c4bed17d904915a3bb489c9c5c476c20b487eb265b991c2c681215a87552401f20b84ee41e8287f73200"}]}}}}}}) getsockopt$inet6_buf(r4, 0x29, 0x32, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r3, 0x29, 0x32, &(0x7f0000000240)=ANY=[@ANYBLOB='K4$\x00\x00\x00\x00\x00'], 0x8) connect$inet6(r3, &(0x7f0000000180)={0x1c, 0x1c, 0x3, 0x0, @empty}, 0x1c) setreuid(0xee00, 0x0) procctl$PROC_WXMAP_STATUS(0x0, 0x0, 0x16, &(0x7f0000001ec0)) r5 = getuid() setreuid(0x0, r5) sendto$inet(r3, &(0x7f0000000200)="0e", 0xff66, 0x0, 0x0, 0x0) readlinkat(0xffffffffffffffff, &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a40)=""/82, 0x52) 1.855742904s ago: executing program 0 (id=11): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x800, 0x100) r1 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r1, 0xc, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x100000001}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000040)={0x29, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffd, [0x0, 0x0, 0x6]}) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000000)={0x0, 0x18, 0x0, 0x0, 0x20, &(0x7f00000003c0)="70638953df0cef7e00080000000bf98994164394b5d947fa8802ca13b7270000", 0x10000, 0xbdfffffd, [0x0, 0x3]}) shm_open2(&(0x7f0000000340)='./file0\x00', 0x800, 0x20, 0x4, &(0x7f0000000380)='/dev/crypto\x00') r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) close(r3) socket$inet6(0x1c, 0x4, 0xc) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) r4 = kqueue() openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x6908bd7c4cbb1798) fchmod(r5, 0x188) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000300)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x1}, {0x60, 0x3, 0xfe, 0x5}, {0x6, 0x0, 0x4, 0xfffffffe}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000001200)={@remote, @remote, [], {@generic={0x6005}}}) kevent(r4, &(0x7f00000000c0)=[{0x4, 0xffffffffffffffff, 0xb1}], 0x1, 0x0, 0x0, 0x0) rfork(0x3060) ioctl$MDIOCATTACH(0xffffffffffffffff, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x653, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x1]}) 0s ago: executing program 2 (id=12): r0 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) open(&(0x7f0000000300)='./file0\x00', 0x800, 0x100) r1 = open(&(0x7f0000000200)='./file0\x00', 0x200, 0x0) fcntl$lock(r1, 0xc, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x100000001}) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x29, &(0x7f0000000280)={0x0, 0x6}, &(0x7f00000002c0)=0x8) ioctl$CIOCGSESSION2(r0, 0xc040636a, &(0x7f0000000040)={0x29, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfffffd, [0x0, 0x0, 0x6]}) open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c6, 0x0) r2 = openat$crypto(0xffffffffffffff9c, &(0x7f0000000100), 0x100000, 0x0) ioctl$CIOCGSESSION2(r2, 0xc040636a, &(0x7f0000000000)={0x0, 0x18, 0x0, 0x0, 0x20, &(0x7f00000003c0)="70638953df0cef7e00080000000bf98994164394b5d947fa8802ca13b7270000", 0x10000, 0xbdfffffd, [0x0, 0x3]}) shm_open2(&(0x7f0000000340)='./file0\x00', 0x800, 0x20, 0x4, &(0x7f0000000380)='/dev/crypto\x00') r3 = open$dir(&(0x7f0000000180)='./file0\x00', 0x40000400000002c2, 0x31) pwritev(r3, &(0x7f0000000080)=[{&(0x7f00000006c0), 0x100000}], 0x1, 0x0) close(r3) socket$inet6(0x1c, 0x4, 0xc) open$dir(&(0x7f00000016c0)='./file0\x00', 0x1, 0x0) r4 = kqueue() openat$crypto(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r5 = freebsd12_shm_open(&(0x7f0000000000)='./file0\x00', 0x200, 0x6908bd7c4cbb1798) fchmod(r5, 0x188) r6 = openat$bpf(0xffffffffffffff9c, &(0x7f0000000080), 0x40, 0x0) ioctl$BIOCSETIF(r6, 0x8020426c, &(0x7f0000000300)) ioctl$BIOCSETF(0xffffffffffffffff, 0x80104267, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x34, 0x0, 0x0, 0x1}, {0x60, 0x3, 0xfe, 0x5}, {0x6, 0x0, 0x4, 0xfffffffe}]}) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$BIOCSETF(r6, 0x80104267, &(0x7f0000000040)={0x0, 0x0}) syz_emit_ethernet(0xe, &(0x7f0000001200)={@remote, @remote, [], {@generic={0x6005}}}) kevent(r4, &(0x7f00000000c0)=[{0x4, 0xffffffffffffffff, 0xb1}], 0x1, 0x0, 0x0, 0x0) r7 = openat$md(0xffffffffffffff9c, &(0x7f0000000000), 0x2000000, 0x0) ioctl$MDIOCATTACH(r7, 0xc1c06d00, &(0x7f00000000c0)={0x0, 0x0, 0x2, &(0x7f0000000040)='./file0\x00', 0x10000, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x3, 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x653, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000, 0x1]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.9' (ED25519) to the list of known hosts. vnode_pager_putpages: zero-length write at 0 resid 131072 0xfffffe006e66b370: type VREG state VSTATE_CONSTRUCTED op 0xffffffff83716280 usecount 7, writecount 4, refcount 35 seqc users 0 hold count flags () flags (VIRF_PGREAD|VV_MD|VMP_LAZYLIST) v_object 0xfffffe00549058b8 ref 1 pages 264 cleanbuf 29 dirtybuf 4 lock type ufs: EXCL by thread 0xfffffe00548a3740 (pid 800, syz-executor, tid 100123) nlink=1, effnlink=1, size=1048576, extsize 0 generation=64fe1813, uid=0, gid=0, flags=0x40008 ino 71, on dev gpt/rootfs Expensive callout(9) function: 0xffffffff81469ee0(0xfffffe006e5946e0) 0.004170846 s panic: negative vmsize for uid 60928 cpuid = 1 time = 1748261094 KDB: stack backtrace: db_trace_self_wrapper() at db_trace_self_wrapper+0xc6/frame 0xfffffe00574c5310 kdb_backtrace() at kdb_backtrace+0xd0/frame 0xfffffe00574c5470 vpanic() at vpanic+0x257/frame 0xfffffe00574c5630 panic() at panic+0xb5/frame 0xfffffe00574c56f0 swap_release_by_cred() at swap_release_by_cred+0x14f/frame 0xfffffe00574c5730 vm_map_entry_delete() at vm_map_entry_delete+0xca/frame 0xfffffe00574c57b0 vm_map_delete() at vm_map_delete+0x530/frame 0xfffffe00574c58f0 vm_map_fixed() at vm_map_fixed+0x181/frame 0xfffffe00574c59d0 vm_mmap_object() at vm_mmap_object+0x324/frame 0xfffffe00574c5a70 kern_mmap() at kern_mmap+0xb1a/frame 0xfffffe00574c5c10 sys_mmap() at sys_mmap+0x153/frame 0xfffffe00574c5d10 amd64_syscall() at amd64_syscall+0x4af/frame 0xfffffe00574c5f30 fast_syscall_common() at fast_syscall_common+0xf8/frame 0xfffffe00574c5f30 --- syscall (198, FreeBSD ELF64, __syscall), rip = 0x3a197a, rsp = 0x82525bf08, rbp = 0x82525bf80 --- KDB: enter: panic [ thread pid 854 tid 100152 ] Stopped at kdb_enter+0x6e: movq $0,0x25be9b7(%rip) db> db> set $lines = 0 db> set $maxwidth = 0 db>